Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/IOGuoiGHLJAwbi5pEcAAvhgCSXA.roa
File: IOGuoiGHLJAwbi5pEcAAvhgCSXA.roa (raw, json)
Hash identifier: QEfBl0X5W4QlD56u3JPPsSJ9EOc7Fk9l1CYCpj33Vcg=
Subject key identifier: 20:E1:AE:A2:21:87:2C:90:30:6E:2E:69:11:C0:00:BE:18:02:49:70
Certificate issuer: /CN=8ba17c051a0285b77c8d927fcfd24b7f88b53ece
Certificate serial: 019FA92C35658388D309FC3CD91801324AF1
Authority key identifier: 8B:A1:7C:05:1A:02:85:B7:7C:8D:92:7F:CF:D2:4B:7F:88:B5:3E:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/IOGuoiGHLJAwbi5pEcAAvhgCSXA.roa
Signing time: Tue 28 Jul 2026 14:41:14 +0000
ROA not before: Tue 28 Jul 2026 14:41:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215716
IP address blocks: 2a0d:22c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 22:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:2c:35:65:83:88:d3:09:fc:3c:d9:18:01:32:4a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ba17c051a0285b77c8d927fcfd24b7f88b53ece
Validity
Not Before: Jul 28 14:41:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20e1aea221872c90306e2e6911c000be18024970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cc:a4:9d:8a:1e:c2:87:63:de:f8:6c:d2:5a:
df:29:5d:22:45:33:de:96:ba:9c:2a:25:66:be:13:
f8:ae:62:48:4c:19:04:41:96:67:ad:83:f2:2e:2b:
b8:f2:d6:b9:00:4e:0e:b5:a8:bd:72:9a:55:4d:c8:
b4:19:54:3e:3c:8d:4f:04:25:26:61:35:ab:ac:2f:
3b:81:b2:21:7d:a4:55:de:35:66:7f:16:7a:7b:97:
f0:63:2e:ec:ee:a3:31:8b:d0:70:c8:82:27:47:f3:
77:3d:94:43:1c:43:24:ce:ba:14:f6:69:e7:5f:0e:
0e:87:d9:99:57:9d:a9:03:b5:72:cf:dd:6e:a2:ff:
ca:41:90:cc:78:93:44:47:95:d5:1b:26:ec:b9:67:
6b:07:bb:f1:ed:75:b8:42:b6:e6:50:41:4f:d0:3f:
3f:66:ea:28:3c:44:9c:04:b1:48:5e:c6:40:5b:94:
6c:81:34:4d:b8:0a:6e:be:73:9c:ac:ec:a8:57:36:
2f:b7:8d:6b:53:22:0c:97:71:21:fe:d0:41:35:44:
93:92:83:a7:29:2f:fd:46:e9:4c:a7:31:90:bb:c0:
8e:b9:79:88:f0:c6:6b:5f:c1:fc:46:6c:f1:ff:e8:
4c:31:de:40:ad:57:b3:74:06:be:b5:65:b0:a3:35:
ae:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E1:AE:A2:21:87:2C:90:30:6E:2E:69:11:C0:00:BE:18:02:49:70
X509v3 Authority Key Identifier:
keyid:8B:A1:7C:05:1A:02:85:B7:7C:8D:92:7F:CF:D2:4B:7F:88:B5:3E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/IOGuoiGHLJAwbi5pEcAAvhgCSXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:22c0::/32
Signature Algorithm: sha256WithRSAEncryption
72:6d:ca:f4:0a:1e:6a:f0:b5:9d:db:eb:bf:3e:ed:4c:e8:c8:
53:2b:23:46:51:74:52:18:b5:a1:00:c4:39:ad:14:d5:67:90:
5a:af:43:63:f3:75:88:21:d8:ff:02:09:ef:18:3f:99:d1:7d:
53:8d:d6:ba:d0:30:d8:42:e7:c2:62:4f:50:f8:c9:8e:a1:f7:
37:bd:7e:83:21:fc:bc:dd:0f:43:71:cc:81:0f:02:e0:07:e7:
d3:a8:f4:75:00:9f:23:0a:2e:5b:7f:57:78:99:b1:5a:24:00:
da:c6:89:26:d1:da:45:5a:29:e8:7b:2f:5c:8e:db:9d:b9:f8:
28:13:3c:0f:06:a9:96:15:62:fc:99:5f:8e:76:cb:89:f2:67:
58:72:d6:37:4c:c0:26:5e:28:a0:4d:41:19:95:43:93:ca:cb:
a0:77:d7:8a:a1:3f:ed:7a:76:6d:c5:ea:65:3a:28:35:0f:4c:
d2:14:d8:2f:8d:c2:6c:99:07:81:fd:66:5b:d0:cd:a2:32:27:
f5:89:07:1d:89:fe:34:da:54:55:4b:6d:e0:70:b2:5a:f2:1d:
16:b7:ed:25:ef:c0:69:57:30:25:d0:28:ac:1b:a8:48:2a:52:
3e:5c:16:47:aa:dc:72:71:64:65:ce:87:a4:67:76:df:60:74:
ca:a1:6b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:51:34 2026 by rpki-client